Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.1

CVE-2026-53132: Linux Kernel: Unbounded Packet Queue in Virtual Socket

CVE-2026-53132
Summary

A bug in the Linux kernel's virtual socket feature could cause a large number of packets to be queued, leading to potential performance issues or crashes. This issue has been fixed in the latest kernel update. Affected users should update their kernel to the latest version to resolve the issue.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software
VendorProductAffected versions
linux linux_kernel >= 6.1.63, < 6.2
>= 6.3.1, < 6.12.94
>= 6.13, < 6.18.36
>= 6.19, < 7.0.13
6.3
7.1
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Original title
In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix potential unbounded skb queue virtio_transport_inc_rx_pkt() checks vvs->rx_bytes + len > vvs->buf_alloc. vir...
Original description
In the Linux kernel, the following vulnerability has been resolved:

vsock/virtio: fix potential unbounded skb queue

virtio_transport_inc_rx_pkt() checks vvs->rx_bytes + len > vvs->buf_alloc.

virtio_transport_recv_enqueue() skips coalescing for packets
with VIRTIO_VSOCK_SEQ_EOM.

If fed with packets with len == 0 and VIRTIO_VSOCK_SEQ_EOM,
a very large number of packets can be queued
because vvs->rx_bytes stays at 0.

Fix this by estimating the skb metadata size:

(Number of skbs in the queue) * SKB_TRUESIZE(0)
Vulnerability type
CWE-401 Memory Leak
Published: 25 Jun 2026 · Updated: 6 Jul 2026 · First seen: 25 Jun 2026